@nodetool-ai/websocket 0.7.0-rc.23 → 0.8.2

package/dist/lib/public-routes.d.ts

@@ -0,0 +1,102 @@
+/**
+ * The auth-exemption allowlist predicates used by the server's `onRequest`
+ * hook.
+ *
+ * These live in their own module so they are testable without booting the
+ * server (`server.ts` is an entry point: importing it opens the database and
+ * binds a port). Getting an entry wrong here is an unauthenticated read of
+ * someone's data, so each predicate is deliberately an allowlist of exact
+ * paths or prefixes that carry no per-caller state.
+ */
+/**
+ * Read-only workflow GETs that carry no per-user data: the shipped example
+ * templates and workflows the owner explicitly marked `access: "public"`.
+ *
+ * Nothing that reads the *caller's* library belongs here. The REST handlers
+ * resolve identity from the (server-set) `x-user-id` header and fall back to
+ * user "1" when it is absent, so an auth-exempt route serves the local user's
+ * private workflows — full graph included — to anyone who can reach the port.
+ * That is exactly the disclosure the "Remote access requires authentication"
+ * 401 exists to prevent, so `/api/workflows`, `/api/workflows/:id`,
+ * `/api/workflows/names`, `/api/workflows/tools`, and `:id/dsl-export` all
+ * stay behind auth. A genuinely public workflow is still reachable
+ * unauthenticated at `/api/workflows/public/:id`.
+ */
+export declare function isPublicWorkflowMetadataRequest(pathname: string, method: string): boolean;
+/**
+ * OAuth paths reachable without a session. Only the two browser redirect
+ * targets qualify: the identity provider sends the user back with no
+ * `Authorization` header, and the handlers authenticate the callback through
+ * the single-use PKCE `state` they minted at `/start`.
+ *
+ * Every other `/api/oauth/*` path reads or mutates stored credentials for the
+ * caller's user id, so exempting the whole prefix let an unauthenticated
+ * caller enumerate linked accounts (`/tokens`), pull the linked third-party
+ * profile and email (`/hf/whoami`, `/github/user`), force token refreshes, and
+ * delete credentials (`/openai/disconnect`) as user "1". The OpenAI (Codex)
+ * flow needs no entry: it redirects to a loopback listener this process binds,
+ * not to a server route.
+ */
+export declare function isPublicOAuthRequest(pathname: string): boolean;
+/**
+ * The MCP OAuth 2.1 authorization-server + resource-metadata surface
+ * (`docs/mcp-oauth-design.md`, `routes/oauth-as.ts`). Every one of these
+ * paths authenticates on its own terms — well-known documents carry no
+ * per-caller state, and `/oauth/authorize|token|register|revoke` validate a
+ * client, a PKCE verifier, or a bearer token, never a session. The two
+ * well-known prefixes are matched with `startsWith` so the path-aware form
+ * (`…/oauth-protected-resource/mcp`) and the root form
+ * (`…/oauth-protected-resource`) both clear under one entry, same as the
+ * file's other prefix rules.
+ *
+ * `/oauth/consent` is deliberately absent: it is an SPA page, not an API
+ * route, and its data comes from an authenticated tRPC call
+ * (`agentAccess.getOauthRequest`) that goes through the normal auth hook.
+ * Exempting it here would serve the page's HTML shell to a caller with no
+ * session, which is fine, but the shell carries no data — the tRPC calls it
+ * makes still require login, so there is nothing to gain and a naming
+ * collision with the four API paths to avoid.
+ */
+export declare function isPublicMcpOauthAsRequest(pathname: string): boolean;
+/**
+ * The two routes a deployed mini app is served from: read the app, and mint
+ * the short-lived session its runs go through. Both take the deployment token
+ * from the path, and that token is the credential — an unguessable 24-byte
+ * secret its owner minted and can revoke.
+ *
+ * The prefix is exact and shallow (`/api/apps/`, not `/api/applications/`) so
+ * it can never widen onto the owner-scoped application routes, which read the
+ * caller's own library and stay behind auth. Nothing here reads a caller's
+ * identity: both handlers resolve everything from the token, and both refuse
+ * outside production, where the surface does not exist at all.
+ */
+export declare function isPublicAppDeploymentRequest(pathname: string, method: string): boolean;
+/**
+ * The read behind a workflow's public share link. The token in the path is
+ * the credential: an unguessable 24-byte secret the owner minted and can
+ * revoke. Only a GET of exactly one segment qualifies, and the prefix sits
+ * outside `/api/workflows/` so it can never widen onto the caller's library.
+ */
+export declare function isPublicSharedWorkflowRequest(pathname: string, method: string): boolean;
+/**
+ * The fal callback authenticates itself with the provider's Ed25519
+ * signature. Only POSTs to the exact callback shape are exempt; neighbouring
+ * provider routes and arbitrary path suffixes remain behind session auth.
+ */
+export declare function isPublicFalWebhookRequest(pathname: string, method: string): boolean;
+/**
+ * The AtlasCloud callback authenticates itself with the provider's Ed25519
+ * signature over the raw body. Only POSTs to the exact callback path are
+ * exempt; neighbouring provider routes stay behind session auth.
+ */
+export declare function isPublicAtlasCloudWebhookRequest(pathname: string, method: string): boolean;
+/**
+ * Paths that skip session auth in the server's `onRequest` hook. Every entry
+ * must carry no per-caller private state, or authenticate on its own (webhook
+ * secret, OAuth PKCE state, KIE webhook signature, fal and AtlasCloud Ed25519
+ * signatures).
+ * All of these are still
+ * covered by the global `@fastify/rate-limit` plugin registered before auth.
+ */
+export declare function isPublicAuthExemptRoute(pathname: string, method: string): boolean;
+//# sourceMappingURL=public-routes.d.ts.map

package/dist/lib/public-routes.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-routes.d.ts","sourceRoot":"","sources":["../../src/lib/public-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;GAaG;AACH,wBAAgB,+BAA+B,CAC7C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAQT;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,oBAAoB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CAK9D;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,wBAAgB,yBAAyB,CAAC,QAAQ,EAAE,MAAM,GAAG,OAAO,CASnE;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,4BAA4B,CAC1C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAST;AAED;;;;;GAKG;AACH,wBAAgB,6BAA6B,CAC3C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAKT;AAED;;;;GAIG;AACH,wBAAgB,yBAAyB,CACvC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAKT;AAED;;;;GAIG;AACH,wBAAgB,gCAAgC,CAC9C,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAIT;AAED;;;;;;;GAOG;AACH,wBAAgB,uBAAuB,CACrC,QAAQ,EAAE,MAAM,EAChB,MAAM,EAAE,MAAM,GACb,OAAO,CAyBT"}

package/dist/lib/public-routes.js

@@ -0,0 +1,168 @@
+/**
+ * The auth-exemption allowlist predicates used by the server's `onRequest`
+ * hook.
+ *
+ * These live in their own module so they are testable without booting the
+ * server (`server.ts` is an entry point: importing it opens the database and
+ * binds a port). Getting an entry wrong here is an unauthenticated read of
+ * someone's data, so each predicate is deliberately an allowlist of exact
+ * paths or prefixes that carry no per-caller state.
+ */
+/**
+ * Read-only workflow GETs that carry no per-user data: the shipped example
+ * templates and workflows the owner explicitly marked `access: "public"`.
+ *
+ * Nothing that reads the *caller's* library belongs here. The REST handlers
+ * resolve identity from the (server-set) `x-user-id` header and fall back to
+ * user "1" when it is absent, so an auth-exempt route serves the local user's
+ * private workflows — full graph included — to anyone who can reach the port.
+ * That is exactly the disclosure the "Remote access requires authentication"
+ * 401 exists to prevent, so `/api/workflows`, `/api/workflows/:id`,
+ * `/api/workflows/names`, `/api/workflows/tools`, and `:id/dsl-export` all
+ * stay behind auth. A genuinely public workflow is still reachable
+ * unauthenticated at `/api/workflows/public/:id`.
+ */
+export function isPublicWorkflowMetadataRequest(pathname, method) {
+    if (method !== "GET")
+        return false;
+    return (pathname === "/api/workflows/public" ||
+        pathname.startsWith("/api/workflows/public/") ||
+        pathname === "/api/workflows/examples" ||
+        pathname.startsWith("/api/workflows/examples/"));
+}
+/**
+ * OAuth paths reachable without a session. Only the two browser redirect
+ * targets qualify: the identity provider sends the user back with no
+ * `Authorization` header, and the handlers authenticate the callback through
+ * the single-use PKCE `state` they minted at `/start`.
+ *
+ * Every other `/api/oauth/*` path reads or mutates stored credentials for the
+ * caller's user id, so exempting the whole prefix let an unauthenticated
+ * caller enumerate linked accounts (`/tokens`), pull the linked third-party
+ * profile and email (`/hf/whoami`, `/github/user`), force token refreshes, and
+ * delete credentials (`/openai/disconnect`) as user "1". The OpenAI (Codex)
+ * flow needs no entry: it redirects to a loopback listener this process binds,
+ * not to a server route.
+ */
+export function isPublicOAuthRequest(pathname) {
+    return (pathname === "/api/oauth/hf/callback" ||
+        pathname === "/api/oauth/github/callback");
+}
+/**
+ * The MCP OAuth 2.1 authorization-server + resource-metadata surface
+ * (`docs/mcp-oauth-design.md`, `routes/oauth-as.ts`). Every one of these
+ * paths authenticates on its own terms — well-known documents carry no
+ * per-caller state, and `/oauth/authorize|token|register|revoke` validate a
+ * client, a PKCE verifier, or a bearer token, never a session. The two
+ * well-known prefixes are matched with `startsWith` so the path-aware form
+ * (`…/oauth-protected-resource/mcp`) and the root form
+ * (`…/oauth-protected-resource`) both clear under one entry, same as the
+ * file's other prefix rules.
+ *
+ * `/oauth/consent` is deliberately absent: it is an SPA page, not an API
+ * route, and its data comes from an authenticated tRPC call
+ * (`agentAccess.getOauthRequest`) that goes through the normal auth hook.
+ * Exempting it here would serve the page's HTML shell to a caller with no
+ * session, which is fine, but the shell carries no data — the tRPC calls it
+ * makes still require login, so there is nothing to gain and a naming
+ * collision with the four API paths to avoid.
+ */
+export function isPublicMcpOauthAsRequest(pathname) {
+    return (pathname.startsWith("/.well-known/oauth-protected-resource") ||
+        pathname.startsWith("/.well-known/oauth-authorization-server") ||
+        pathname === "/oauth/authorize" ||
+        pathname === "/oauth/token" ||
+        pathname === "/oauth/register" ||
+        pathname === "/oauth/revoke");
+}
+/**
+ * The two routes a deployed mini app is served from: read the app, and mint
+ * the short-lived session its runs go through. Both take the deployment token
+ * from the path, and that token is the credential — an unguessable 24-byte
+ * secret its owner minted and can revoke.
+ *
+ * The prefix is exact and shallow (`/api/apps/`, not `/api/applications/`) so
+ * it can never widen onto the owner-scoped application routes, which read the
+ * caller's own library and stay behind auth. Nothing here reads a caller's
+ * identity: both handlers resolve everything from the token, and both refuse
+ * outside production, where the surface does not exist at all.
+ */
+export function isPublicAppDeploymentRequest(pathname, method) {
+    if (!pathname.startsWith("/api/apps/"))
+        return false;
+    const segments = pathname.slice("/api/apps/".length).split("/");
+    if (segments[0] === "")
+        return false;
+    if (method === "GET")
+        return segments.length === 1;
+    if (method === "POST") {
+        return segments.length === 2 && segments[1] === "session";
+    }
+    return false;
+}
+/**
+ * The read behind a workflow's public share link. The token in the path is
+ * the credential: an unguessable 24-byte secret the owner minted and can
+ * revoke. Only a GET of exactly one segment qualifies, and the prefix sits
+ * outside `/api/workflows/` so it can never widen onto the caller's library.
+ */
+export function isPublicSharedWorkflowRequest(pathname, method) {
+    const prefix = "/api/shared-workflows/";
+    if (method !== "GET" || !pathname.startsWith(prefix))
+        return false;
+    const token = pathname.slice(prefix.length);
+    return token.length > 0 && !token.includes("/");
+}
+/**
+ * The fal callback authenticates itself with the provider's Ed25519
+ * signature. Only POSTs to the exact callback shape are exempt; neighbouring
+ * provider routes and arbitrary path suffixes remain behind session auth.
+ */
+export function isPublicFalWebhookRequest(pathname, method) {
+    const prefix = "/api/providers/fal/webhook/";
+    if (method !== "POST" || !pathname.startsWith(prefix))
+        return false;
+    const token = pathname.slice(prefix.length);
+    return token.length > 0 && !token.includes("/");
+}
+/**
+ * The AtlasCloud callback authenticates itself with the provider's Ed25519
+ * signature over the raw body. Only POSTs to the exact callback path are
+ * exempt; neighbouring provider routes stay behind session auth.
+ */
+export function isPublicAtlasCloudWebhookRequest(pathname, method) {
+    return (method === "POST" && pathname === "/api/providers/atlascloud/webhook");
+}
+/**
+ * Paths that skip session auth in the server's `onRequest` hook. Every entry
+ * must carry no per-caller private state, or authenticate on its own (webhook
+ * secret, OAuth PKCE state, KIE webhook signature, fal and AtlasCloud Ed25519
+ * signatures).
+ * All of these are still
+ * covered by the global `@fastify/rate-limit` plugin registered before auth.
+ */
+export function isPublicAuthExemptRoute(pathname, method) {
+    return (pathname === "/health" ||
+        pathname === "/ready" ||
+        pathname === "/api/health" ||
+        pathname === "/api/config" ||
+        isPublicOAuthRequest(pathname) ||
+        pathname === "/api/assets/packages" ||
+        pathname.startsWith("/api/assets/packages/") ||
+        pathname === "/api/nodes/metadata" ||
+        pathname.startsWith("/api/kie/webhook") ||
+        pathname.startsWith("/api/webhooks/") ||
+        // Messaging-integration identity routes. Like the webhook routes, they
+        // authenticate themselves — every handler requires the server's
+        // NODETOOL_INTEGRATION_TOKEN, compared in constant time — and they carry
+        // no per-caller session. Without that env var they are not registered at
+        // all, so the exemption reaches a 404.
+        pathname.startsWith("/api/integrations/") ||
+        isPublicWorkflowMetadataRequest(pathname, method) ||
+        isPublicAppDeploymentRequest(pathname, method) ||
+        isPublicSharedWorkflowRequest(pathname, method) ||
+        isPublicFalWebhookRequest(pathname, method) ||
+        isPublicAtlasCloudWebhookRequest(pathname, method) ||
+        isPublicMcpOauthAsRequest(pathname));
+}
+//# sourceMappingURL=public-routes.js.map

package/dist/lib/public-routes.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-routes.js","sourceRoot":"","sources":["../../src/lib/public-routes.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AAEH;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,+BAA+B,CAC7C,QAAgB,EAChB,MAAc;IAEd,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,KAAK,CAAC;IACnC,OAAO,CACL,QAAQ,KAAK,uBAAuB;QACpC,QAAQ,CAAC,UAAU,CAAC,wBAAwB,CAAC;QAC7C,QAAQ,KAAK,yBAAyB;QACtC,QAAQ,CAAC,UAAU,CAAC,0BAA0B,CAAC,CAChD,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,oBAAoB,CAAC,QAAgB;IACnD,OAAO,CACL,QAAQ,KAAK,wBAAwB;QACrC,QAAQ,KAAK,4BAA4B,CAC1C,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;;;;;;;;GAkBG;AACH,MAAM,UAAU,yBAAyB,CAAC,QAAgB;IACxD,OAAO,CACL,QAAQ,CAAC,UAAU,CAAC,uCAAuC,CAAC;QAC5D,QAAQ,CAAC,UAAU,CAAC,yCAAyC,CAAC;QAC9D,QAAQ,KAAK,kBAAkB;QAC/B,QAAQ,KAAK,cAAc;QAC3B,QAAQ,KAAK,iBAAiB;QAC9B,QAAQ,KAAK,eAAe,CAC7B,CAAC;AACJ,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,4BAA4B,CAC1C,QAAgB,EAChB,MAAc;IAEd,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IACrD,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAC,YAAY,CAAC,MAAM,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAChE,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,EAAE;QAAE,OAAO,KAAK,CAAC;IACrC,IAAI,MAAM,KAAK,KAAK;QAAE,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,CAAC;IACnD,IAAI,MAAM,KAAK,MAAM,EAAE,CAAC;QACtB,OAAO,QAAQ,CAAC,MAAM,KAAK,CAAC,IAAI,QAAQ,CAAC,CAAC,CAAC,KAAK,SAAS,CAAC;IAC5D,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,6BAA6B,CAC3C,QAAgB,EAChB,MAAc;IAEd,MAAM,MAAM,GAAG,wBAAwB,CAAC;IACxC,IAAI,MAAM,KAAK,KAAK,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACnE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,yBAAyB,CACvC,QAAgB,EAChB,MAAc;IAEd,MAAM,MAAM,GAAG,6BAA6B,CAAC;IAC7C,IAAI,MAAM,KAAK,MAAM,IAAI,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IACpE,MAAM,KAAK,GAAG,QAAQ,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAC5C,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;AAClD,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,gCAAgC,CAC9C,QAAgB,EAChB,MAAc;IAEd,OAAO,CACL,MAAM,KAAK,MAAM,IAAI,QAAQ,KAAK,mCAAmC,CACtE,CAAC;AACJ,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,uBAAuB,CACrC,QAAgB,EAChB,MAAc;IAEd,OAAO,CACL,QAAQ,KAAK,SAAS;QACtB,QAAQ,KAAK,QAAQ;QACrB,QAAQ,KAAK,aAAa;QAC1B,QAAQ,KAAK,aAAa;QAC1B,oBAAoB,CAAC,QAAQ,CAAC;QAC9B,QAAQ,KAAK,sBAAsB;QACnC,QAAQ,CAAC,UAAU,CAAC,uBAAuB,CAAC;QAC5C,QAAQ,KAAK,qBAAqB;QAClC,QAAQ,CAAC,UAAU,CAAC,kBAAkB,CAAC;QACvC,QAAQ,CAAC,UAAU,CAAC,gBAAgB,CAAC;QACrC,uEAAuE;QACvE,gEAAgE;QAChE,yEAAyE;QACzE,yEAAyE;QACzE,uCAAuC;QACvC,QAAQ,CAAC,UAAU,CAAC,oBAAoB,CAAC;QACzC,+BAA+B,CAAC,QAAQ,EAAE,MAAM,CAAC;QACjD,4BAA4B,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC9C,6BAA6B,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC/C,yBAAyB,CAAC,QAAQ,EAAE,MAAM,CAAC;QAC3C,gCAAgC,CAAC,QAAQ,EAAE,MAAM,CAAC;QAClD,yBAAyB,CAAC,QAAQ,CAAC,CACpC,CAAC;AACJ,CAAC"}

package/dist/lib/public-workflow-share.d.ts

@@ -0,0 +1,20 @@
+/**
+ * Reads behind a workflow's public share link.
+ *
+ * A `public` share token lets anyone see one workflow and lets a signed-in
+ * user copy it into their own workflows. It never becomes a collaborator
+ * grant. Unknown, revoked, and non-public tokens all answer the same
+ * NOT_FOUND, so a caller cannot tell a view or edit token from a dead one.
+ */
+import type { Workflow as WorkflowModel } from "@nodetool-ai/models";
+import { type PublicSharedWorkflow } from "@nodetool-ai/protocol/api-schemas/workflows.js";
+/** The workflow behind an active public share token, else NOT_FOUND. */
+export declare function loadPublicShareWorkflow(token: string): Promise<WorkflowModel>;
+/** The graph a stored row carries, or null when it does not parse. */
+export declare function parseSharedGraph(raw: unknown): PublicSharedWorkflow["graph"];
+/**
+ * What a public link shows: the graph and its label. Nothing about the owner,
+ * the row id, or where the workflow lives.
+ */
+export declare function getPublicSharedWorkflow(token: string): Promise<PublicSharedWorkflow>;
+//# sourceMappingURL=public-workflow-share.d.ts.map

package/dist/lib/public-workflow-share.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-workflow-share.d.ts","sourceRoot":"","sources":["../../src/lib/public-workflow-share.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAGH,OAAO,KAAK,EAAE,QAAQ,IAAI,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACrE,OAAO,EAEL,KAAK,oBAAoB,EAC1B,MAAM,gDAAgD,CAAC;AAKxD,wEAAwE;AACxE,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,aAAa,CAAC,CAYxB;AAED,sEAAsE;AACtE,wBAAgB,gBAAgB,CAC9B,GAAG,EAAE,OAAO,GACX,oBAAoB,CAAC,OAAO,CAAC,CAI/B;AAED;;;GAGG;AACH,wBAAsB,uBAAuB,CAC3C,KAAK,EAAE,MAAM,GACZ,OAAO,CAAC,oBAAoB,CAAC,CAQ/B"}

package/dist/lib/public-workflow-share.js

@@ -0,0 +1,45 @@
+/**
+ * Reads behind a workflow's public share link.
+ *
+ * A `public` share token lets anyone see one workflow and lets a signed-in
+ * user copy it into their own workflows. It never becomes a collaborator
+ * grant. Unknown, revoked, and non-public tokens all answer the same
+ * NOT_FOUND, so a caller cannot tell a view or edit token from a dead one.
+ */
+import { Workflow, WorkflowShare } from "@nodetool-ai/models";
+import { graph as graphSchema } from "@nodetool-ai/protocol/api-schemas/workflows.js";
+import { ApiErrorCode } from "../error-codes.js";
+import { throwApiError } from "../trpc/error-formatter.js";
+/** The workflow behind an active public share token, else NOT_FOUND. */
+export async function loadPublicShareWorkflow(token) {
+    const share = await WorkflowShare.findByToken(token);
+    if (!share || share.isRevoked || share.role !== "public") {
+        throwApiError(ApiErrorCode.NOT_FOUND, "Share link is invalid or revoked");
+    }
+    const workflow = (await Workflow.get(share.workflow_id));
+    if (!workflow) {
+        throwApiError(ApiErrorCode.NOT_FOUND, "Share link is invalid or revoked");
+    }
+    return workflow;
+}
+/** The graph a stored row carries, or null when it does not parse. */
+export function parseSharedGraph(raw) {
+    if (raw == null)
+        return null;
+    const parsed = graphSchema.safeParse(raw);
+    return parsed.success ? parsed.data : null;
+}
+/**
+ * What a public link shows: the graph and its label. Nothing about the owner,
+ * the row id, or where the workflow lives.
+ */
+export async function getPublicSharedWorkflow(token) {
+    const workflow = await loadPublicShareWorkflow(token);
+    return {
+        name: workflow.name,
+        description: workflow.description ?? null,
+        tags: workflow.tags ?? [],
+        graph: parseSharedGraph(workflow.graph)
+    };
+}
+//# sourceMappingURL=public-workflow-share.js.map

package/dist/lib/public-workflow-share.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"public-workflow-share.js","sourceRoot":"","sources":["../../src/lib/public-workflow-share.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,QAAQ,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAE9D,OAAO,EACL,KAAK,IAAI,WAAW,EAErB,MAAM,gDAAgD,CAAC;AAExD,OAAO,EAAE,YAAY,EAAE,MAAM,mBAAmB,CAAC;AACjD,OAAO,EAAE,aAAa,EAAE,MAAM,4BAA4B,CAAC;AAE3D,wEAAwE;AACxE,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa;IAEb,MAAM,KAAK,GAAG,MAAM,aAAa,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC;IACrD,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,QAAQ,EAAE,CAAC;QACzD,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,QAAQ,GAAG,CAAC,MAAM,QAAQ,CAAC,GAAG,CAClC,KAAK,CAAC,WAAW,CAClB,CAAyB,CAAC;IAC3B,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,aAAa,CAAC,YAAY,CAAC,SAAS,EAAE,kCAAkC,CAAC,CAAC;IAC5E,CAAC;IACD,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,gBAAgB,CAC9B,GAAY;IAEZ,IAAI,GAAG,IAAI,IAAI;QAAE,OAAO,IAAI,CAAC;IAC7B,MAAM,MAAM,GAAG,WAAW,CAAC,SAAS,CAAC,GAAG,CAAC,CAAC;IAC1C,OAAO,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;AAC7C,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,KAAa;IAEb,MAAM,QAAQ,GAAG,MAAM,uBAAuB,CAAC,KAAK,CAAC,CAAC;IACtD,OAAO;QACL,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,WAAW,EAAE,QAAQ,CAAC,WAAW,IAAI,IAAI;QACzC,IAAI,EAAE,QAAQ,CAAC,IAAI,IAAI,EAAE;QACzB,KAAK,EAAE,gBAAgB,CAAC,QAAQ,CAAC,KAAK,CAAC;KACxC,CAAC;AACJ,CAAC"}

package/dist/lib/run-trace-live-delivery.d.ts

@@ -0,0 +1,25 @@
+import type { StoredRunTraceUpdate } from "@nodetool-ai/protocol";
+export type LiveRunTraceUpdate = StoredRunTraceUpdate & {
+    resnapshot_required?: true;
+};
+/** One transport write at a time, with a bounded cache of each span's latest record. */
+export declare class RunTraceLiveDelivery {
+    private readonly send;
+    private readonly onError;
+    private readonly limits;
+    private readonly queued;
+    private queuedBytes;
+    private sending;
+    private closed;
+    private resnapshotRequired;
+    constructor(send: (update: LiveRunTraceUpdate) => Promise<void>, onError: (error: unknown) => void, limits?: {
+        spans: number;
+        bytes: number;
+    });
+    get bufferedSpanCount(): number;
+    get bufferedBytes(): number;
+    enqueue(update: StoredRunTraceUpdate): void;
+    close(): void;
+    private flush;
+}
+//# sourceMappingURL=run-trace-live-delivery.d.ts.map

package/dist/lib/run-trace-live-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-trace-live-delivery.d.ts","sourceRoot":"","sources":["../../src/lib/run-trace-live-delivery.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AAElE,MAAM,MAAM,kBAAkB,GAAG,oBAAoB,GAAG;IAAE,mBAAmB,CAAC,EAAE,IAAI,CAAA;CAAE,CAAC;AAKvF,wFAAwF;AACxF,qBAAa,oBAAoB;IAQ7B,OAAO,CAAC,QAAQ,CAAC,IAAI;IACrB,OAAO,CAAC,QAAQ,CAAC,OAAO;IACxB,OAAO,CAAC,QAAQ,CAAC,MAAM;IATzB,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAsE;IAC7F,OAAO,CAAC,WAAW,CAAK;IACxB,OAAO,CAAC,OAAO,CAAS;IACxB,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,kBAAkB,CAAS;IAEnC,YACmB,IAAI,EAAE,CAAC,MAAM,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,EACnD,OAAO,EAAE,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,EACjC,MAAM;;;KAA2D,EAChF;IAEJ,IAAI,iBAAiB,IAAI,MAAM,CAA6B;IAC5D,IAAI,aAAa,IAAI,MAAM,CAA6B;IAExD,OAAO,CAAC,MAAM,EAAE,oBAAoB,GAAG,IAAI,CAyB1C;IAED,KAAK,IAAI,IAAI,CAIZ;YAEa,KAAK;CAyBpB"}

package/dist/lib/run-trace-live-delivery.js

@@ -0,0 +1,91 @@
+const MAX_BUFFERED_SPANS = 128;
+const MAX_BUFFERED_BYTES = 8 * 1024 * 1024;
+/** One transport write at a time, with a bounded cache of each span's latest record. */
+export class RunTraceLiveDelivery {
+    send;
+    onError;
+    limits;
+    queued = new Map();
+    queuedBytes = 0;
+    sending = false;
+    closed = false;
+    resnapshotRequired = false;
+    constructor(send, onError, limits = { spans: MAX_BUFFERED_SPANS, bytes: MAX_BUFFERED_BYTES }) {
+        this.send = send;
+        this.onError = onError;
+        this.limits = limits;
+    }
+    get bufferedSpanCount() { return this.queued.size; }
+    get bufferedBytes() { return this.queuedBytes; }
+    enqueue(update) {
+        if (this.closed) {
+            return;
+        }
+        const key = `${update.run_id}:${update.record.span_id}`;
+        const previous = this.queued.get(key);
+        if (previous) {
+            this.queued.delete(key);
+            this.queuedBytes -= previous.bytes;
+            this.resnapshotRequired = true;
+        }
+        const bytes = Buffer.byteLength(JSON.stringify(update));
+        if (bytes > this.limits.bytes) {
+            this.resnapshotRequired = true;
+            return;
+        }
+        this.queued.set(key, { update, bytes });
+        this.queuedBytes += bytes;
+        while (this.queued.size > this.limits.spans || this.queuedBytes > this.limits.bytes) {
+            const oldestKey = this.queued.keys().next().value;
+            if (oldestKey === undefined) {
+                break;
+            }
+            const oldest = this.queued.get(oldestKey);
+            this.queued.delete(oldestKey);
+            this.queuedBytes -= oldest?.bytes ?? 0;
+            this.resnapshotRequired = true;
+        }
+        if (!this.sending) {
+            void this.flush();
+        }
+    }
+    close() {
+        this.closed = true;
+        this.queued.clear();
+        this.queuedBytes = 0;
+    }
+    async flush() {
+        this.sending = true;
+        try {
+            while (!this.closed && this.queued.size > 0) {
+                const key = this.queued.keys().next().value;
+                if (key === undefined) {
+                    break;
+                }
+                const next = this.queued.get(key);
+                if (!next) {
+                    break;
+                }
+                this.queued.delete(key);
+                this.queuedBytes -= next.bytes;
+                const resnapshot = this.resnapshotRequired;
+                this.resnapshotRequired = false;
+                try {
+                    const update = { ...next.update };
+                    if (resnapshot) {
+                        update.resnapshot_required = true;
+                    }
+                    await this.send(update);
+                }
+                catch (error) {
+                    this.resnapshotRequired = true;
+                    this.onError(error);
+                }
+            }
+        }
+        finally {
+            this.sending = false;
+        }
+    }
+}
+//# sourceMappingURL=run-trace-live-delivery.js.map

package/dist/lib/run-trace-live-delivery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"run-trace-live-delivery.js","sourceRoot":"","sources":["../../src/lib/run-trace-live-delivery.ts"],"names":[],"mappings":"AAIA,MAAM,kBAAkB,GAAG,GAAG,CAAC;AAC/B,MAAM,kBAAkB,GAAG,CAAC,GAAG,IAAI,GAAG,IAAI,CAAC;AAE3C,wFAAwF;AACxF,MAAM,OAAO,oBAAoB;IAQZ,IAAI;IACJ,OAAO;IACP,MAAM;IATR,MAAM,GAAG,IAAI,GAAG,EAA2D,CAAC;IACrF,WAAW,GAAG,CAAC,CAAC;IAChB,OAAO,GAAG,KAAK,CAAC;IAChB,MAAM,GAAG,KAAK,CAAC;IACf,kBAAkB,GAAG,KAAK,CAAC;IAEnC,YACmB,IAAmD,EACnD,OAAiC,EACjC,MAAM,GAAG,EAAE,KAAK,EAAE,kBAAkB,EAAE,KAAK,EAAE,kBAAkB,EAAE;oBAFjE,IAAI;uBACJ,OAAO;sBACP,MAAM;IACtB,CAAC;IAEJ,IAAI,iBAAiB,KAAa,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC;IAC5D,IAAI,aAAa,KAAa,OAAO,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC;IAExD,OAAO,CAAC,MAA4B;QAClC,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;YAAC,OAAO;QAAC,CAAC;QAC5B,MAAM,GAAG,GAAG,GAAG,MAAM,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACxD,MAAM,QAAQ,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;QACtC,IAAI,QAAQ,EAAE,CAAC;YACb,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;YACxB,IAAI,CAAC,WAAW,IAAI,QAAQ,CAAC,KAAK,CAAC;YACnC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACjC,CAAC;QACD,MAAM,KAAK,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC;QACxD,IAAI,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YAC9B,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;YAC/B,OAAO;QACT,CAAC;QACD,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QACxC,IAAI,CAAC,WAAW,IAAI,KAAK,CAAC;QAC1B,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,IAAI,IAAI,CAAC,WAAW,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;YACpF,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;YAClD,IAAI,SAAS,KAAK,SAAS,EAAE,CAAC;gBAAC,MAAM;YAAC,CAAC;YACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YAC1C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;YAC9B,IAAI,CAAC,WAAW,IAAI,MAAM,EAAE,KAAK,IAAI,CAAC,CAAC;YACvC,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;QACjC,CAAC;QACD,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC;YAAC,KAAK,IAAI,CAAC,KAAK,EAAE,CAAC;QAAC,CAAC;IAC3C,CAAC;IAED,KAAK;QACH,IAAI,CAAC,MAAM,GAAG,IAAI,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,CAAC;QACpB,IAAI,CAAC,WAAW,GAAG,CAAC,CAAC;IACvB,CAAC;IAEO,KAAK,CAAC,KAAK;QACjB,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,CAAC;YACH,OAAO,CAAC,IAAI,CAAC,MAAM,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,GAAG,CAAC,EAAE,CAAC;gBAC5C,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC;gBAC5C,IAAI,GAAG,KAAK,SAAS,EAAE,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBACjC,MAAM,IAAI,GAAG,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;gBAClC,IAAI,CAAC,IAAI,EAAE,CAAC;oBAAC,MAAM;gBAAC,CAAC;gBACrB,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;gBACxB,IAAI,CAAC,WAAW,IAAI,IAAI,CAAC,KAAK,CAAC;gBAC/B,MAAM,UAAU,GAAG,IAAI,CAAC,kBAAkB,CAAC;gBAC3C,IAAI,CAAC,kBAAkB,GAAG,KAAK,CAAC;gBAChC,IAAI,CAAC;oBACH,MAAM,MAAM,GAAuB,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;oBACtD,IAAI,UAAU,EAAE,CAAC;wBAAC,MAAM,CAAC,mBAAmB,GAAG,IAAI,CAAC;oBAAC,CAAC;oBACtD,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;gBAC1B,CAAC;gBAAC,OAAO,KAAK,EAAE,CAAC;oBACf,IAAI,CAAC,kBAAkB,GAAG,IAAI,CAAC;oBAC/B,IAAI,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;gBACtB,CAAC;YACH,CAAC;QACH,CAAC;gBAAS,CAAC;YACT,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACvB,CAAC;IACH,CAAC;CACF"}

package/dist/lib/runtime-detection.d.ts

@@ -0,0 +1,17 @@
+/** The runtimes a client gets when it asks for no particular ones. */
+export declare const KNOWN_RUNTIMES: readonly ["python", "nodejs", "ffmpeg", "ffprobe", "pandoc", "pdftotext", "pdftoppm", "yt-dlp"];
+/** Whether `command` resolves to an executable on PATH. */
+export declare function hasExecutable(command: string): Promise<boolean>;
+export interface RuntimeStatus {
+    id: string;
+    installed: boolean;
+}
+/**
+ * Report install status for each runtime id. Unknown-but-safe ids are probed
+ * under their own name; an id that isn't a bare command name reports
+ * `installed: false` rather than touching the filesystem with it.
+ */
+export declare function detectRuntimes(ids?: readonly string[]): Promise<RuntimeStatus[]>;
+/** Drop cached probe results (tests, and after an install changes PATH). */
+export declare function clearRuntimeDetectionCache(): void;
+//# sourceMappingURL=runtime-detection.d.ts.map

package/dist/lib/runtime-detection.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detection.d.ts","sourceRoot":"","sources":["../../src/lib/runtime-detection.ts"],"names":[],"mappings":"AA2BA,sEAAsE;AACtE,eAAO,MAAM,cAAc,YACzB,QAAQ,EACR,QAAQ,EACR,QAAQ,EACR,SAAS,EACT,QAAQ,EACR,WAAW,EACX,UAAU,EACV,QAAQ,CACA,CAAC;AAuBX,2DAA2D;AAC3D,wBAAsB,aAAa,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAQrE;AAED,MAAM,WAAW,aAAa;IAC5B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,OAAO,CAAC;CACpB;AAED;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,GAAG,GAAE,SAAS,MAAM,EAAmB,GACtC,OAAO,CAAC,aAAa,EAAE,CAAC,CAc1B;AAED,4EAA4E;AAC5E,wBAAgB,0BAA0B,IAAI,IAAI,CAEjD"}

package/dist/lib/runtime-detection.js

@@ -0,0 +1,90 @@
+/**
+ * Detects which external runtimes (ffmpeg, pandoc, yt-dlp, …) are present on
+ * the machine running the server.
+ *
+ * The desktop app answers this over Electron IPC, because it also installs the
+ * runtimes. A browser client — the web build, and every Docker/Fly deployment —
+ * has no such channel, so without this it assumed nothing was installed and
+ * showed "Requires FFmpeg" on nodes that run fine, since the container ships
+ * ffmpeg.
+ *
+ * Detection is a PATH scan for an executable file, not a spawn: it costs a few
+ * `access()` calls, cannot hang, and cannot run client-supplied strings.
+ * Results are cached briefly so a canvas full of video nodes probes once.
+ */
+import { constants as fsConstants, promises as fs } from "node:fs";
+import path from "node:path";
+/**
+ * Runtime ids whose executable is named differently from the id. Ids not
+ * listed here are probed under their own name (`ffmpeg`, `pandoc`, `yt-dlp`, …).
+ */
+const RUNTIME_COMMANDS = {
+    nodejs: "node",
+    pdftotext: "pdftotext",
+    pdftoppm: "pdftoppm"
+};
+/** The runtimes a client gets when it asks for no particular ones. */
+export const KNOWN_RUNTIMES = [
+    "python",
+    "nodejs",
+    "ffmpeg",
+    "ffprobe",
+    "pandoc",
+    "pdftotext",
+    "pdftoppm",
+    "yt-dlp"
+];
+/** Ids that are safe to probe: a bare command name, nothing path-like. */
+const SAFE_ID = /^[A-Za-z0-9][A-Za-z0-9._+-]{0,63}$/;
+const CACHE_TTL_MS = 30_000;
+const cache = new Map();
+function candidateNames(command) {
+    if (process.platform !== "win32")
+        return [command];
+    const exts = (process.env["PATHEXT"] ?? ".EXE;.CMD;.BAT;.COM").split(";");
+    return [command, ...exts.filter(Boolean).map((ext) => command + ext)];
+}
+async function isExecutable(file) {
+    try {
+        await fs.access(file, fsConstants.X_OK);
+        return true;
+    }
+    catch {
+        return false;
+    }
+}
+/** Whether `command` resolves to an executable on PATH. */
+export async function hasExecutable(command) {
+    const dirs = (process.env["PATH"] ?? "").split(path.delimiter).filter(Boolean);
+    for (const dir of dirs) {
+        for (const name of candidateNames(command)) {
+            if (await isExecutable(path.join(dir, name)))
+                return true;
+        }
+    }
+    return false;
+}
+/**
+ * Report install status for each runtime id. Unknown-but-safe ids are probed
+ * under their own name; an id that isn't a bare command name reports
+ * `installed: false` rather than touching the filesystem with it.
+ */
+export async function detectRuntimes(ids = KNOWN_RUNTIMES) {
+    const now = Date.now();
+    return Promise.all(ids.map(async (id) => {
+        if (!SAFE_ID.test(id))
+            return { id, installed: false };
+        const cached = cache.get(id);
+        if (cached && now - cached.at < CACHE_TTL_MS) {
+            return { id, installed: cached.installed };
+        }
+        const installed = await hasExecutable(RUNTIME_COMMANDS[id] ?? id);
+        cache.set(id, { installed, at: now });
+        return { id, installed };
+    }));
+}
+/** Drop cached probe results (tests, and after an install changes PATH). */
+export function clearRuntimeDetectionCache() {
+    cache.clear();
+}
+//# sourceMappingURL=runtime-detection.js.map

package/dist/lib/runtime-detection.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"runtime-detection.js","sourceRoot":"","sources":["../../src/lib/runtime-detection.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AACH,OAAO,EAAE,SAAS,IAAI,WAAW,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACnE,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B;;;GAGG;AACH,MAAM,gBAAgB,GAA2B;IAC/C,MAAM,EAAE,MAAM;IACd,SAAS,EAAE,WAAW;IACtB,QAAQ,EAAE,UAAU;CACrB,CAAC;AAEF,sEAAsE;AACtE,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,QAAQ;IACR,QAAQ;IACR,QAAQ;IACR,SAAS;IACT,QAAQ;IACR,WAAW;IACX,UAAU;IACV,QAAQ;CACA,CAAC;AAEX,0EAA0E;AAC1E,MAAM,OAAO,GAAG,oCAAoC,CAAC;AAErD,MAAM,YAAY,GAAG,MAAM,CAAC;AAC5B,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8C,CAAC;AAEpE,SAAS,cAAc,CAAC,OAAe;IACrC,IAAI,OAAO,CAAC,QAAQ,KAAK,OAAO;QAAE,OAAO,CAAC,OAAO,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,qBAAqB,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IAC1E,OAAO,CAAC,OAAO,EAAE,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC;AACxE,CAAC;AAED,KAAK,UAAU,YAAY,CAAC,IAAY;IACtC,IAAI,CAAC;QACH,MAAM,EAAE,CAAC,MAAM,CAAC,IAAI,EAAE,WAAW,CAAC,IAAI,CAAC,CAAC;QACxC,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,OAAe;IACjD,MAAM,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IAC/E,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;QACvB,KAAK,MAAM,IAAI,IAAI,cAAc,CAAC,OAAO,CAAC,EAAE,CAAC;YAC3C,IAAI,MAAM,YAAY,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;gBAAE,OAAO,IAAI,CAAC;QAC5D,CAAC;IACH,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAOD;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,cAAc,CAClC,GAAG,GAAsB,cAAc;IAEvC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,OAAO,OAAO,CAAC,GAAG,CAChB,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,EAAE,EAAE,EAAE;QACnB,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,KAAK,EAAE,CAAC;QACvD,MAAM,MAAM,GAAG,KAAK,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC7B,IAAI,MAAM,IAAI,GAAG,GAAG,MAAM,CAAC,EAAE,GAAG,YAAY,EAAE,CAAC;YAC7C,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;QAC7C,CAAC;QACD,MAAM,SAAS,GAAG,MAAM,aAAa,CAAC,gBAAgB,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC;QAClE,KAAK,CAAC,GAAG,CAAC,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;QACtC,OAAO,EAAE,EAAE,EAAE,SAAS,EAAE,CAAC;IAC3B,CAAC,CAAC,CACH,CAAC;AACJ,CAAC;AAED,4EAA4E;AAC5E,MAAM,UAAU,0BAA0B;IACxC,KAAK,CAAC,KAAK,EAAE,CAAC;AAChB,CAAC"}

package/dist/lib/storage-access.d.ts

@@ -0,0 +1,21 @@
+export declare function isRuntimeScratchKey(key: string): boolean;
+/**
+ * Derive the owning asset id from a storage key. Asset files are stored flat
+ * as `<assetId>.<ext>` and `<assetId>_thumb.jpg`.
+ */
+export declare function assetIdFromKey(key: string): string | null;
+/**
+ * Whether `userId` owns the asset a key refers to. Fails closed: a key that
+ * maps to no asset row, or a lookup that throws, is not owned.
+ */
+export declare function callerOwnsStorageKey(userId: string, key: string): Promise<boolean>;
+/**
+ * Whether `userId` may read the bytes at `key`.
+ *
+ * Owner-prefixed keys (`<userId>/<assetId>.<ext>`) are settled by the prefix
+ * alone — no database round trip, and the same rule a Supabase RLS policy or
+ * bucket policy applies to the object itself. Legacy flat keys, written
+ * before that layout, still need the `assets` lookup.
+ */
+export declare function canReadStorageKey(userId: string, key: string): Promise<boolean>;
+//# sourceMappingURL=storage-access.d.ts.map

package/dist/lib/storage-access.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"storage-access.d.ts","sourceRoot":"","sources":["../../src/lib/storage-access.ts"],"names":[],"mappings":"AA+BA,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAKxD;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAKzD;AAED;;;GAGG;AACH,wBAAsB,oBAAoB,CACxC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,CAQlB;AAED;;;;;;;GAOG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,GACV,OAAO,CAAC,OAAO,CAAC,CAKlB"}